cdmunoz · August 17, 2026 20:07
diff --git a/README.md b/README.md
diff --git a/agent-code-reviewer.md b/agent-code-reviewer.md
diff --git a/agent-dart-coder.md b/agent-dart-coder.md
diff --git a/agent-flutter-ui-builder.md b/agent-flutter-ui-builder.md
diff --git a/agent-system-auditor.md b/agent-system-auditor.md
diff --git a/hook-stop-chain.sh b/hook-stop-chain.sh
 #!/usr/bin/env bash
 # ---------------------------------------------------------------------------
 # Stop hook — makes the review chain non-optional.
 #
 # Instructions in a prompt can be forgotten. A hook cannot. This is the
 # deterministic backstop under the whole loop: when the assistant tries to
 # finish its turn, this runs. If production code was edited without the review
 # chain, it blocks the stop and tells the orchestrator what is missing.
 #
 # Skeleton template — stack-agnostic bash + jq.
 # Adapt: the source-path pattern, the agent names, and the chain order.
 #
 # Wire it up in .claude/settings.json:
 #   { "hooks": { "Stop": [ { "hooks": [
 #       { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/stop-chain.sh" }
 #   ] } ] } }
 # ---------------------------------------------------------------------------

 set -uo pipefail

 PAYLOAD=$(cat)

 # --- 0. Already blocked once this turn? Let it finish. --------------------
 # Without this you create an infinite block loop.
 if [ "$(echo "$PAYLOAD" | jq -r '.stop_hook_active // false')" = "true" ]; then
  exit 0
 fi

 TRANSCRIPT=$(echo "$PAYLOAD" | jq -r '.transcript_path // ""')
 [ -z "$TRANSCRIPT" ] || [ ! -f "$TRANSCRIPT" ] && exit 0

 REPO="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2>/dev/null)}"
 [ -z "$REPO" ] && exit 0

 # --- 1. Scope to the CURRENT TURN only ------------------------------------
 # Everything after the most recent user message. Auditing the whole session
 # would mean edits made before the hook existed block you forever.
 LAST_USER_LINE=$(grep -n '"type":"user"' "$TRANSCRIPT" 2>/dev/null | tail -1 | cut -d: -f1)
 [ -z "$LAST_USER_LINE" ] && exit 0
 CURRENT_TURN=$(tail -n +"$LAST_USER_LINE" "$TRANSCRIPT")

 # --- 2. Was production code edited this turn? -----------------------------
 # REPLACE the grep patterns with your own source layout.
 # Note the second grep: generated files don't count as human-authored edits.
 HAS_EDIT=$(echo "$CURRENT_TURN" | jq -r '
  select(.message.content != null) |
  .message.content[]? |
  select(.type == "tool_use") |
  select(.name == "Edit" or .name == "Write" or .name == "MultiEdit") |
  .input.file_path // empty
 ' 2>/dev/null \
  | grep -E "^${REPO}/(lib|src|test)/.+\.(dart|ts|py)$" \
  | grep -vE '\.(g|generated|mocks|freezed)\.' \
  | head -1)

 # No production edits → nothing to enforce.
 [ -z "$HAS_EDIT" ] && exit 0

 # --- 3. Which agents ran this turn? ---------------------------------------
 AGENTS=$(echo "$CURRENT_TURN" | jq -r '
  select(.message.content != null) |
  .message.content[]? |
  select(.type == "tool_use") |
  select(.name == "Task") |
  .input.subagent_type // empty
 ' 2>/dev/null)

 has_agent() { echo "$AGENTS" | grep -qx "$1"; }

 # --- 4. Enforce the chain -------------------------------------------------
 # REPLACE with your own agent names and required order.
 MISSING=""
 if ! has_agent "code-reviewer"; then
  MISSING="code-reviewer"
 fi

 if [ -n "$MISSING" ]; then
  # exit 2 + stderr = block the stop; the text goes back to the assistant.
  echo "BLOCKED: production code was edited this turn without the review chain." >&2
  echo "Missing: ${MISSING}" >&2
  echo "Run the missing agent(s) on the current diff, then finish." >&2
  exit 2
 fi

 exit 0

 # ---------------------------------------------------------------------------
 # Notes from running this in production:
 #
 # * Scope to the current turn. A session-wide check is unusable — it blocks on
 #   history you can no longer change.
 # * Honour stop_hook_active. Skipping it produces an unbreakable loop.
 # * Exclude generated files, or codegen alone will trip the gate.
 # * Fail OPEN on infrastructure problems (missing transcript, no jq, not a git
 #   repo → exit 0). A hook that blocks because a dependency is missing gets
 #   deleted by the first person it inconveniences. Fail closed only on the
 #   condition you actually care about.
 # * Log the payload to a temp file while developing — the transcript shape is
 #   the thing you'll get wrong first.
 # ---------------------------------------------------------------------------
diff --git a/skill-verify-quality.md b/skill-verify-quality.md
File	What it is
`agent-dart-coder.md`	Full template — business-logic implementer
`agent-flutter-ui-builder.md`	Full template — UI implementer
`agent-code-reviewer.md`	Condensed — the always-on review gate
`agent-system-auditor.md`	Condensed — second-model audit for high-risk changes
`skill-verify-quality.md`	Slash-command workflow — format · lint · test
`hook-stop-chain.sh`	The deterministic backstop, skeletonised
name	code-reviewer
description	Invoke after any code implementation task, or when explicitly called.
model	opus
color	blue
tools	Read, Glob, Grep, Bash
name	dart-coder
description	Expert in business logic, MVVM architecture, and pure Dart code (ViewModels, UseCases, Repositories, Services) following Clean Architecture.
model	sonnet
color	blue
tools	Read, Edit, Write, Glob, Grep, Bash
Layer	Responsibility	Restriction
ViewModel	Orchestrate logic, expose state	Does NOT import `flutter/material.dart`
UseCase	Reusable business rules	Only shared code + repositories
Repository	Orchestrate remote + cache	Returns a `Result<T>`, never throws
Remote Service	HTTP calls	Only the HTTP client + models
Storage	Local persistence	Only the DB layer + models
name	flutter-ui-builder
description	Expert in implementing Flutter UI, widget refactoring, and visual behaviors.
model	sonnet
color	purple
tools	Read, Edit, Write, Glob, Grep, Bash
Situation	Widget type	Binding
No side effects, no connectivity	`StatelessWidget`	create-and-consume
With one-shot effects	`StatefulWidget`	consume + effect listener
Needs connectivity awareness	`StatefulWidget`	connectivity-aware consumer
name	system-auditor
description	High-fidelity system auditor backed by a SECOND model via an external CLI. Acts as a Quality Gate — deep impact analysis on high-blast-radius changes.
model	sonnet
color	purple
tools	Bash, Read, Write
	#!/usr/bin/env bash
	# ---------------------------------------------------------------------------
	# Stop hook — makes the review chain non-optional.
	#
	# Instructions in a prompt can be forgotten. A hook cannot. This is the
	# deterministic backstop under the whole loop: when the assistant tries to
	# finish its turn, this runs. If production code was edited without the review
	# chain, it blocks the stop and tells the orchestrator what is missing.
	#
	# Skeleton template — stack-agnostic bash + jq.
	# Adapt: the source-path pattern, the agent names, and the chain order.
	#
	# Wire it up in .claude/settings.json:
	# { "hooks": { "Stop": [ { "hooks": [
	# { "type": "command", "command": "$CLAUDE_PROJECT_DIR/.claude/hooks/stop-chain.sh" }
	# ] } ] } }
	# ---------------------------------------------------------------------------

	set -uo pipefail

	PAYLOAD=$(cat)

	# --- 0. Already blocked once this turn? Let it finish. --------------------
	# Without this you create an infinite block loop.
	if [ "$(echo "$PAYLOAD" \| jq -r '.stop_hook_active // false')" = "true" ]; then
	exit 0
	fi

	TRANSCRIPT=$(echo "$PAYLOAD" \| jq -r '.transcript_path // ""')
	[ -z "$TRANSCRIPT" ] \|\| [ ! -f "$TRANSCRIPT" ] && exit 0

	REPO="${CLAUDE_PROJECT_DIR:-$(git rev-parse --show-toplevel 2>/dev/null)}"
	[ -z "$REPO" ] && exit 0

	# --- 1. Scope to the CURRENT TURN only ------------------------------------
	# Everything after the most recent user message. Auditing the whole session
	# would mean edits made before the hook existed block you forever.
	LAST_USER_LINE=$(grep -n '"type":"user"' "$TRANSCRIPT" 2>/dev/null \| tail -1 \| cut -d: -f1)
	[ -z "$LAST_USER_LINE" ] && exit 0
	CURRENT_TURN=$(tail -n +"$LAST_USER_LINE" "$TRANSCRIPT")

	# --- 2. Was production code edited this turn? -----------------------------
	# REPLACE the grep patterns with your own source layout.
	# Note the second grep: generated files don't count as human-authored edits.
	HAS_EDIT=$(echo "$CURRENT_TURN" \| jq -r '
	select(.message.content != null) \|
	.message.content[]? \|
	select(.type == "tool_use") \|
	select(.name == "Edit" or .name == "Write" or .name == "MultiEdit") \|
	.input.file_path // empty
	' 2>/dev/null \
	\| grep -E "^${REPO}/(lib\|src\|test)/.+\.(dart\|ts\|py)$" \
	\| grep -vE '\.(g\|generated\|mocks\|freezed)\.' \
	\| head -1)

	# No production edits → nothing to enforce.
	[ -z "$HAS_EDIT" ] && exit 0

	# --- 3. Which agents ran this turn? ---------------------------------------
	AGENTS=$(echo "$CURRENT_TURN" \| jq -r '
	select(.message.content != null) \|
	.message.content[]? \|
	select(.type == "tool_use") \|
	select(.name == "Task") \|
	.input.subagent_type // empty
	' 2>/dev/null)

	has_agent() { echo "$AGENTS" \| grep -qx "$1"; }

	# --- 4. Enforce the chain -------------------------------------------------
	# REPLACE with your own agent names and required order.
	MISSING=""
	if ! has_agent "code-reviewer"; then
	MISSING="code-reviewer"
	fi

	if [ -n "$MISSING" ]; then
	# exit 2 + stderr = block the stop; the text goes back to the assistant.
	echo "BLOCKED: production code was edited this turn without the review chain." >&2
	echo "Missing: ${MISSING}" >&2
	echo "Run the missing agent(s) on the current diff, then finish." >&2
	exit 2
	fi

	exit 0

	# ---------------------------------------------------------------------------
	# Notes from running this in production:
	#
	# * Scope to the current turn. A session-wide check is unusable — it blocks on
	# history you can no longer change.
	# * Honour stop_hook_active. Skipping it produces an unbreakable loop.
	# * Exclude generated files, or codegen alone will trip the gate.
	# * Fail OPEN on infrastructure problems (missing transcript, no jq, not a git
	# repo → exit 0). A hook that blocks because a dependency is missing gets
	# deleted by the first person it inconveniences. Fail closed only on the
	# condition you actually care about.
	# * Log the payload to a temp file while developing — the transcript shape is
	# the thing you'll get wrong first.
	# ---------------------------------------------------------------------------